Assurity Trusted Solutions Pte Ltd

Auditor

• Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.
• **Key Responsibilities:**
• - Develop and tailor audit programmes, security audit checklists, and assessment methodologies to evaluate the design and operating effectiveness of internal controls in mitigating ICT risks.
• - Plan, design, and execute policy risk-based audits, process audits, and technical audits of systems, applications, and supporting infrastructure.
• - Manage stakeholder engagements with agencies throughout the audit lifecycle, including audit planning, briefings, fieldwork, management discussions, response reviews, and follow-up activities, to ensure timely and effective delivery of audit plans.
• - Review and evaluate audit observations to assess the overall state of ICT governance, risk management, and control practices across agencies and the Whole-of-Government environment.
• - Develop practical and risk-based recommendations and mitigation measures to strengthen ICT governance, security, and control effectiveness.
• - Collaborate with stakeholders at both operational and management levels to assess issues, identify root causes, and formulate recommendations to address identified gaps.
• - Monitor and validate the implementation of corrective actions to ensure audit findings have been effectively remediated and underlying root causes adequately addressed.
• - Plan, procure, and actively manage outsourced audit resources and augmentation services to ensure the successful delivery of committed audit outcomes and deliverables.
• - Conduct ICT&SS audits of Government agencies as assigned by GovTech’s Internal Audit Division (IAD). Perform in-depth reviews of Government agencies’ ICT&SS processes, applications, systems, and supporting infrastructure.
• - Facilitate the reporting and maintenance of audit findings in the designated central audit repository.
• - Manage end-to-end audit engagements, engage effectively with stakeholders across multiple agencies, and provide assurance over the adequacy and effectiveness of ICT governance, risk management, and control frameworks.

Senior IT Auditor

Systems Engineer

• - Day 2 Operations & Lifecycle Management: Own the monitoring, proactive health-checking, performance tuning, and capacity management of enterprise Nutanix HCI clusters (AOS/AHV) and RHEL environments.
• - Patching & Compliance: Manage routine and emergency patching, kernel upgrades, and firmware updates across Nutanix blocks and RHEL estates while adhering strictly to government security baselines and minimizing system downtime.
• - Infrastructure Automation: Write and maintain Ansible playbooks and Bash scripts to automate repetitive system administration tasks, configurations, and configuration drift management.
• - Incident & Problem Management: Serve as the technical escalation point for complex infrastructure incidents, conducting deep-dive root cause analysis (RCA) and implementing permanent fixes.
• - Backup & Disaster Recovery: Regularly manage, validate, and test disaster recovery (DR) procedures and backup replication policies across our production nodes.
• - Collaboration: Work closely with application developers, security operators, and infrastructure architects to ensure platform changes cleanly align with Day 2 operational stability.

System Engineer, Nutanix, Red Hat

Procurement

• Develop procurement strategies based on business needs and ICT market analysis.
• Conduct industry engagement and analyse relevant procurement data to make informed procurement decisions.
• Manage ICT bulk tender projects.
• Co-draft and/or review tender documents including specifications, Terms and Conditions, and evaluation criteria.
• Guide users through various procurement processes.
• Evaluate tenders and ensure compliance with Government procurement policies.
• Assess technical requirements with understanding of ICT industry and key players.
• Monitor supplier performance and service levels.
• Handle contract variations and technology updates.
• Manage supplier relationships and resolve disputes.
• Review risks in agreements, especially for Commercial Cloud services and Software-as-a-Service subscriptions.
• Guide customers on Government procurement policies and compliance.
• Review and assess procurement risks and the impact to the contracts and customers.
• Provide procurement advice to Customers.
• Ensure timely completion of procurement projects.
• Prepare status reports for management.
• Manage stakeholder communications.
• Monitor project timelines and quality standards.
• Ensure adherence to Procurement policies.
• Support procurement audits and follow up on findings till closure.
• Guide Customers on contract management matters.

Tech Procurement Specialist, 1 Year Contract – Maternity Cover

DevOps Engineer

• Lead product development, system integration and architecture design for applications used by public officers through partnership with product managers.
• Manage application development teams and ensure alignment with product roadmaps and requirements.
• Work closely with product managers to translate business requirements into technical product roadmaps, including prototypes to validate business needs and proof of concepts.
• Provide application operational and technical support for products in-scope.
• Ensure product availability, resilience and security including L2 support in product incident management.
• Serve as the technical lead for in-house software development teams, coaching and managing them to deliver project outcomes effectively.
• Work regularly with engineers to engage in conversations regarding their performance, professional growth, offering constructive feedback, mentoring, and guidance as needed.
• Provide guidance and support to outsourced vendors, ensuring they meet project goals and deliverables.
• Direct and promote good software engineering practices within in-house and outsourced teams, focusing on DevSecOps, Site Reliability Engineering (SRE), and Cloud Computing.
• Drive the adoption of SG TechStack and develop Standard Operating Procedures (SOPs) while providing coaching to teams.
• Partner stakeholders and agencies to prioritize and manage roadmaps for delivering towards product vision incrementally and efficiently.
• Establishing practices and tools to encourage a strong engineering culture and maximize engineering effectiveness and impact.
• Helping with recruitment of software engineers.

Senior Software Engineer – Full-Stack, DevOps

Security Operations

• As part of the team, you will develop and maintain cybersecurity standards, procedures, configurations or rulesets for the systems and services.
• For validation of security procedures, you will conduct security exercises which may include table-top or simulation exercises.
• Participate in security incident response that includes understanding alerts, coordination with various system or service operators, identifying potential threats and performing basic triaging prior to escalation to next level security responder.
• Coordinate in Indicators-Of-Compromise (IOC) scanning, collating the reports from various system operators with consolidated update to the stakeholders.
• Perform vulnerability assessment using automated and manual tools with recommendation for actionable remediation controls. Understand the published vulnerabilities with their respective security patches with context to the deployed system and perform risk assessment onto them.
• Monitor and notify security patches releases for the various products. Involve in the security patch assessment rating based on standards like Common Vulnerability Scoring System (CVSS) as well as with the context of the deployed environment.
• Engage with stakeholders with presentation or reporting on the vulnerability scanning results, security testing results, security incident or security posture of the systems.

Senior IT Auditor

System Engineer, Nutanix, Red Hat

Tech Procurement Specialist, 1 Year Contract – Maternity Cover

Senior Software Engineer – Full-Stack, DevOps

Cybersecurity Engineer – IT Security Operations